per 



WORLD INTELLECTUAL PROPERTY ORGANIZATION 
International Bureau 




^^n^ERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCD 



V- , niatiooal Patent Ctesifkalian ^ 
<I6F 15/40, 5/00 



Al 



(ll)lDteniatlimal PuUicatioa Nnmber: WO 94/01828 

(43) Intenational Publicatioa Date: 20 January 1994 (20.01.94) 



(21) IntematifHial Applicatioii Number: 
p2) IntematkHud Filing Date: 



PCT/US93/06287 
1 July 1993 (01.07.93) 



C30) Priority data: 
07/908;M8 



2 July 1992(02,07.92) 



US 



(TDAmlicant: WELLFUBEI CX)MMUNICATIONS [US/ 
USl; 15 Crosby Drive, BcdfOTl, MA 01739-1418 (U^ 

(72)lBveiitDis: BIALKOWSKI, Jan ; 48 Royal Crest Drive?, #6, 
Nashua, NH 03060 (US). KRAWCZYK, John ; 32 
SpringHekl Street, Watertown, MA 02172 (US). 

(74)Agent: WALPERT. Gaiy, A.; Fish & Richardson. 225 
Franklin Street, Boston, MA 021 10-2804 (US). 



ffll) Desfgnated States: AU, CA, JP, European patent (AT, BE, 
CH, DE, DK, ES. FR, GB, GR, IE, IT. LU, MC, NL, 
PT. SE). 



PoMlshed 

Wkh intmtational seardt report 

B^re the aqpiradon of the time limit for amending the 
claims and to be republished in the event of the receipt of 
amendments^ 



(54) Tide: DATA PACKET PROCESSING METHOD AND APPARATUS 
(57)Abstnct 

A padut processing method and af^[>aratus efTidently process a binary data pad^ based upon information contained in 
the header portion QO) of the packet The method and apparatus employ a binary tree search method for determining ranges of 
key elements of the pax^ and associatiiig with eadh of tf» ranges a usar supplied data and filter mask. The binary search process 
employs a unique binary tree storage structure ^ch both conserves storage memory and enables effident processing to reach a 
final node of the Wnary tree decfai<m table. Nodes can be added or ddcted from the table by ^ 

ing needs change. 



FOR THE FUSPOSBS OP INFORMATION ONLY 



Codes used to identify States party to the PCT on the firoot pages of pamphlets publishing international 
applications under the FCT. 



AT 
AU 


Aiauia 
AnnniHa 


PR 
CA 


CMMMft 


MB 
MW 


Mattriunla 


U 
WE 


Bvlndcs 

Bc^ptMB 


CB 
CH 


OhImsi 


HE 
NL 


HrfhfTrtaiwt^ 


BP 




ca 


GfCCCB 


NO 


' Norway 


BC 


Bttlgvia 


HU 




NZ 


New Zealand 


flj 


Dcnin 


IE 




PL 


Poland 


BB 


Brazil 


IT 


laaly 


rr 




BY 


Bcfarm 


JP 




ftO 


Romania 


CA 




KP 


nwormic Pcopte^ RepubUc 


BU 


Riasias MeratkMi 


CP 


^mi*M AfnCBD Kcpmnc 




cTKbica 


so 


Sudan 


GG 


Swittcrlnd 


KB 


BcpMbCcofKon* 


SB 


Sweden 


CB 


Mt 




SI 


Slovenia 


a 

CM 


CteBCSOon 


U 
LK 




SIC 
SN 


Sovafc Republic 
Scnepi 


CN 


CUm 


Ul 




TD 


Chad 


cs 


CVrffcwhrrrtli 


LV 




TC 


To8P 


GZ 


GMiRqpublic 


MC 




UA 


Ukraine 


DB 


Germany 
Dcaottrfc 


MC 


liaB^ 


US 


tJi^ted Slates of Ancrica 


DK 


ML 




UZ 


Ihbefcbtan 


BS 




MN 


tdoapiBi 


VN 


VielNam 


PI 


FWnd 











wo 94/01828 



PCr/US93/06287 



- 1 - 

DATA PACKET PROCESSING METHOD AND APPARATUS 
The inven-blon relates generally to the 

transmission, processing, and forvmrding of data 
* 5 communications packets, and in pairticular, to the method 

and apparatus for processing the packets at an 

intermediate node during transmission from source to 

destination. 

Background of the Invention 

10 The process of transmitting data packets from a 

source to a destination typically requires at least one 
inteannediate forwarding node. The equipment at the 
intermediate node, often called a router or a bridge, 
receives the data packet, examines or suialyzes it, and 

15 forwards it on to a next node or destination on the 

network as is appropriate. The process of examining the 
packet typically employs table look-ups, and the process 
of demultiplexing the packet, and analyzing, filtering 
and forwarding the packet headers, requires a substantial 

20 amount of table look-t^. Their frequency, and the 

overall coiaputer processor time esqpended for those tasks, 
requires substantial processor capability. Accordingly, 
methods have been eioployed to reduce the CPU 
requirements, and, accordingly, improve throughput 

25 through the node and maintain effective costs. 

It is therefore an object of this invention to 
provide a yet further improved throughput through a 
router or bridge, and simultaneously reduce the need for 
CPU processor time ^rtiile maintaining memory requirements 

30 and other heordware needs at a minimum. Other objects of 
the invention include high reliability, the capability of 
handling complex packet headers, and effectively 
providing filtering results simultaneotxsly with the 
destination address determination. 
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fimrnna-rY of the Invention 
The invention relates to a method and appciratus 
for processing binary data packets which have an 
information containing portion and a data containing 
5 portion. The method features the steps of creating and 
storing at least one binary tree decision table which has 
a plurality of non-final nodes and a plurality of final 
nodes. The table represents a binary decision tree 
structure. The method further features the steps of 

10 processing the information containing portion of the data 
packet to be processed using the binary tree table for 
determining the processing to be used for the packet, and 
thereafter processing the packet in accordance with the 
processing results just obtained. 

15 The apparatus and method of the invention are 

particuleorly advantageous in using the binary tree search 
for determining ^Aether a particular key value is 
contained in a predefined range of data values previously 
input by the user. If a key included in the information 

20 containing portion of the pacdcet falls within a 

predefined range, the search algorithm provides user data 
and filter mask data for use by the packet processing 
system. The use of the user supplied data does not 
require a priori knowledge of irtiere in the range the key 

25 value is positioned and the biiuury tree search method 
similarly does not attempt to provide an exact match to 
the key value (except in the special instance ^ere the 
range contains only one value). Accordingly, as is well 
known in the art, many key values to be searched in a 

30 data packet header need only be associated with a 

contiguous rcinge of data and the described binary tree 
search method and apparatus uniquely provides in an 
efficient manner the "imprecise" match of the key value 
to the range and thereafter associates with that key 



wo 94/01828 



PCrAIS93/06287 



• 3 - 

value the designated user data and filter mask 
information previously provided to the system* 

In particular embodiments of the invention, the 
creating and storing step features the steps of dividing 
5 a storage table or memory into a niimbered sequence of 
subairrays, ordering the binary tree structure in a 
dependency order of numbered tree nodes, and storing left 
and right node children of a node numbered "n**, and 
stored at subarray "n**, at subeurrays "2n" and •»2n+l" 

10 corresponding to nodes ••2n" and "2n+l", respectively. In 
order to achieve better and more balanced processing, the 
method further features the steps of assigning a weight 
to each node which is equal to sum of the weights of each 
of its child nodes and thereafter balancing the 

15' binary tree structure whenever the weights associated 
with two child nodes of a common parent node differ by 
more than one« 

The packet processing method further features the 
ability to add and delete nodes from an existing binary 

20 tree structure by modifying the bineiry tree decision 
table. The method further features, in a particul€ir 
embodiment of the invention, processing the incoming 
information containing portion of a packet by deciding, 
for each non-final node, whether a selected subset of the 

25 portion is greater than a predetermined node threshold 
value and thereafter proceeding to one of the lower order 
right child node or left child node depending on the 
relative values of the subset and the threshold. The 
non-final subarrays thereby store threshold values, and 

30 each final subairray is reached by passing through a 

sequence of non-final nodes. The final node contains an 
information data portion and a filter mask containing 
portion. The described binary tree structure is 
particulcurly advantageous for searching for a range of 

35 values. 
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There will be times when the input information 
containing portion of the packet to be processed can be 
advantageously segmented into a plurality of information 
subset segments, thereby enabling the segments to be 
5 processed separately. Accordingly, the invention further 
features segmenting the input information containing 
portion into a plurality of information subset segments, 
processing the segments to determine a filter mask for 
each segment, and AND^ing the results of each filter mask 

10 with an initial filter mask to determine the final filter 
processing for the data packet. In those instances where 
a segment has a length greater than the operating word 
length associated with the process, the invention 
features dividing each segment (or the entire information 

15 containing portion) into a plurality of subsegments, 
processing each subsegment through the binary tree 
stinicture as noted above, and AND'ing the filter mask 
results for the subsegments to achieve a final filter 
mask ixistruction. 

20 The apparatus of the invention, implements the 

method described above, and typically features circuitry 
for creating and storing at least one binary tree 
decision table having a plurality of non-final nodes and 
a plurality of final nodes. As before, the tcQjle 

25 represents a binazry decision tree structure. The 

apparatus further features circuitary for processing the 
information containing portion of the data packet, 
segmenting it if necessary, using the binary tree table 
for determining the processing to be used for the packet. 

30 The packet is then processed in accordance with those 
processing results. Where necessary, circuitry is 
further provided for efficiently storing the binary tree 
table, balancing the table as necessary, adding and 
deleting nodes, passing through the binary tree in an 

35 ordered fashion using the threshold values stored in, in 
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association with each node, the memory subarray, and 
segmenting the information containing portions either due 
to length of the portion or the separation of related 
information, into subsegments of the information 
5 containing portion, which subsegments are then serially 
processed. 

Brief Description of the Drawing 
Other objects, features and advantages of the 
invention will be apparent from the following description 
10 taken together with the drawings in which: 

Figure 1 is an illustrative network including 
source/destination and analyzing/forwarding nodes of a 
typical network; 

Figure 2 illustrates the structure of a typical 
15 data packet to be analyzed and operated upon in 
accordance with the invention; 

Figiire 3 illustrates a decision tree structure in 
accordance with a preferred embodiment of the invention; 

Figure 4 illustrates a memory structure accordance 
20 for storing and implementing the binairy tree structure of 
Figure 3 in accordance with a preferred embodiment of the 
invention; 

Figure 5 illustrates the deletion of a node from a 
binary tree structure; 
25 Figure 6 illustrates the insertion of a node in a 

decision tree structure; 

Figure 7 illustrates the balancing of a binary 
decision tree in accordance with a preferred embodiment 
of the invention; 
30 Figure 8 is a flow chart illustrating operation of 

the analysis and filtering system in accordance with the 
preferred embodiment of the invention; and 

Figure 9 is a hardware configuration capeible of 
implementing the preferred embodiment of the invention. 
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Description of the Prefeixed igmiw^-itn«>Tytft 
Referring to Figure 1, a data commtmications 
network 10 can have a plurality of source, or 
destination, nodes 10a, 10b, lOn and a plurality of 

5 intermediate coTinecting or forwarding nodes 12a, 12b, 
12ia. The various nodes, whether they are 
source/destination nodes, or intermediate/forwarding 
nodes, are interconnected in various circuit patterns by 
interconnecting data links 14a, 14b, 14p» In this 

10 data tremsmission enviroiunent, therefore, a data packet 
sent, for example, from a (source) node lOa to a 
(destination) node lOd, can traverse a plurality of 
different paths 14, depending upon, for example, the 
availability of the paths, the cost of the various paths, 
15 the speed of the veirious paths, the operability of the 
paths, etc* 

In accordemce with the preferred embodiment of the 
invention, the data sent from a source node to a 
destination node, is transmitted in the form of a data 

20 packet 16. Referring to Figure 2, a typical data packet 
16 is transmitted by appending to the data portion 18 of 
the packet, a header portion 20, and adding at the end of 
the data packet, a trailer portion 22. The header 
portion can contain any of a number of different items of 

25 information, which, according to the protocol being 
employed, will appecur in known positional locations 
within the header • The header information may include, 
for example, the address of the destination node, the 
address of the source node, a preferred path to take, 

30 instructions with regard to timing of the data and 

forwarding the data in accordance with various filtering 
operations. The trailer portion of the data packet may 
include, for example, a CRC check to insure accuracy and 
integrity of the data packet once it is received. 
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In accordance with a preferred enbodimen't of the 
invention, the header portion of the data packet is 
decoded so that the intermediate or forwarding node 12 
has sufficient information to forward (or not forward) 
5 and otherwise process the data packet in an appropriate 
manner over the appropriate paths. For example, an 
intermediate or forwarding node 12b has the option of 
passing a data packet over path 14d or 14e when, for 
example, the destination is node lOd. The header 

10 information being provided can simplify that choice or 
provide a command which eliminates the cibility of the 
node to ^choose"* • 

In accordemce with the illustrated embodiment of 
the invention, the header information can be quite long, 

15 for example, over several hundred bits of data. 

AccordJLngly, the decoding process for the header can be 
either long or tedious, or both, and can take substantial 
CPU time, which otherwise could be used for more 
"profitable* functions* In any case, the passage of the 

20 packet throu^ the intermediate node can be accordingly 
delayed. In accordance with the present invention, a 
binary tree structure is employed to speed the data 
packet through the intermediate node 12 to its eventual 
destination. The binary tree structure operates, in a 

25 simple manner, to process and emalyze the incoming data 
packet, filter it, and thereby, if appropriate, pass it 
on to a next node. 

In accordance with the invention, therefore, a 
specialized and hi^ly optimized table look-up service is 

30 provided for demultiplexing, forwarding, and filtering 
the data packet. The lor^k-i:q? table method implements, 
preferably in a software embodiment, an associative 
m^ory that stores the data identified by various "keys", 
such as the destination and source addresses, so that 

35 during a look-up operation, the information can be 
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sccuined until a ma-tch of the key being processed is 
obtained. While a linear secorch could be implemented, it 
is far too slow to be of practical use. In particular, 
since the keys which are to be supported can be of 
5 arbitrary length (but typically are contiguous) , the 
linecir search does not provide a practical solution. In 
addition, it is typical that a key has a range of values, 
each of which causes the same filtering operation (s) to 
take place. 

10 Accordingly, in accordance with the preferred 

embodiment of the invention, a unique binary tree table 
is employed to effect the look-up service. In accordance 
with the illustrated preferred embodiment, key fields 
within the packets are defined using bit offsets from a 

15 convenient reference point, for exeunple, the beginning of 
the packet. The header keys can have variable formats, 
for exaaiple, IP options, and additional reference points 
may be needed. The bit offsets are stored in the table 
where they can be referenced during the table sesurch. 

20 The look-iqp table binary tree is a uniquely adapted to 
searching for ranges of data, and to apply user supplied 
information to the entire range. In this meumer, a key 
incorporating, for exanq^le, IP options, can be 
advantageously and quickly decoded and a range of values 

25 will provide a common, user-identified, result. 

The look-up table can directly deal with at most 
only 32-bit contiguous keys in accordance with the 
illustrated embodiment of the invention. Smaller, that 
is, shorter length keys, are always preferably left 

30 adjusted and larger, but continguous keys are 

transparently divided or chopped into 32 bit fragments by 
system interface software routines. Non-contiguous keys, 
^ich are useful for perfonaing arbitrary filtering, 
r^uire a more intimate involvement with the application, 

35 that is, the look-up tcible must be segmented so that the 
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first look-up stage processes one 32 bit key fragment or 
subfragment, and thereby results in a reference to a 
* second stage look-up table, and so on. The final look-up 

result returns the user data supplied when the entry was 
» 5 installed in the table. 

The left shifting of the shorter key lengths is 
equivalent to providing a range of values defined by the 
most significant bits of the left shifted key, with the 
lower order bits, the bits shifted into a 32 bit word, 

10 being in effect "don't ceore" bits. The described binary 
tree search is particularly adapted to sesurching for a 
reinge of values set up by the left shifted key in 
accord2mce with the invention. 

There is, however, one problem with this approach. 

15 The second, third, and further levels of table will 
occupy exponentially growing space within the memory. 
Thus, for example, if a first level table has 1,000 
entries pointing to 1,000 second level tables, each with 
1,000 entries, it becomes clear that the process will not 

20 adequately woz% because the second and subsequent set of 
tables must be shared among many, and preferably all, 
entries in preceding level tables. The table sharing, 
however, loses information about earlier look-up results 
in the process. For exsmplB, if all first level entries 

25 pointed to the same second level table, the first level 
look-up entry would have only a one bit result: either 
the entry was found, in which case it would go to the 
second table or not, in which case the packet would be 
dropped. This is insufficient to implement any rational 

30 filter. 

Thus, for a header made up of a plurality of key 
values 22a, 22b, 22c, vhich may correspond, for exaa^le, 
to source address, destination address, and protocol 
type, the system must decide how the packets will be 
35 processed. In accordance with a preferred embodiment of 
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the invention, a binary tree table approach is employed, 
in which the decision process is reduced to "simple 

binary decisions** based upon the various keys 22 in the « 
packet. A typical look-up binary tree stinicture is 
5 illustrated in Figure 3, in which, starting from a root # 
node 24, the tree structure emmanates. The binary tree 
structure provides that for each pcurent node, such sls 
root node 24, there exists a left child node such as node 
26 and a right child node, such as node 28. This 

10 procedure continues for the entire tree, so that, for the 
illustrated embodiment, further left and right child 
nodes are provided and labelled 30, 32, 52. In 

accordance with this embodiment, for each key of the 
header, the system makes binary decisions for 

15 determining, at the various nodes, whether a particulcir 
range of values, or a specific value (a range limited to 
one value) exists. The process thus provides for passing 
throu^ various non-final nodes in the tree to a final 
node at which a selected range or value is determined to 

20 exist. Beyond this final node, there are no further 
nodes and the final node provides both a filter mask 
instruction word, as well as user data. The filter mask 
instruction word, in fact a filter mask, is a 
specification word, each bit of ^ich is associated with 

25 a different operation. Thus, one bit may provide for 
dropping the packet and not passing it forward, while 
another bit will provide for a different action. The 
apparatus can thus, once the final node has been 
determined, take the filter mask and perform operations 

30 upon the packet data in accordcuice with the bits set 
therein. 

The resulting "look-up tcible" thus provides for a 
method tat determining whether a range of values, or a 
specific value (a range limited to one value) has been 
35 found and, irtien found, the filtering operation to be 
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applied to that range of values. Accordingly, each non- 
. final node thus represents, itself, a range of values, 
the left child node of which represents a lower portion 
of the range and the right child node represents the 
» 5 upper portion of the range. At the end of the seeirch 

process, the user data and filter mask of the final node 
are thus applicable to all values in the range 
represented by the final node. 

If the operation upon the packet is detenained by 

10 a plurality of keys, rather than one key of the header, 
there can result a sequence of tree searches with a 
resulting sequence of filter mask values for determining 
operations upon the data packet. In this instance, each 
of the various masks can be advantageously and, in the 

15 preferred embodiment are, "AND'ed" together, so that only 
bits set for each and every filter mask will survive and 
be effective. In a properly constructed binary tree 
structure, the operations will not be self -contradicting. 
The length of the filter mask is arbitrarily set 

20 at 32 bits, each of the bits being used for filtering in 
the illustrated embodiment. In fact, in other 
embodiments of the invention, the length of the mask is 
arbitTEury, and one or more bits could be set aside, for 
example the 32nd bit of the mask could be reserved for 

25 normal forwarding. 

In a preferred embodiment of the invention, and to 
avoid txsing excessive memory, the binary tree table can 
be stored as a "look up table" as follows. First, as 
illustrated in Figure 3, the nodes are numbered, in 

30 sequence, so that the root node is numbered "1", its 
children are nximbered ••2" and »»3»» for the left hand and 
ri^t hand child, respectively, and each successive node 
in the tree, node n, is numbered so that its children are 
numbered 2n and 2n+l for the left and right child nodes, 

35 respectively. In this manner, referring to Figure 4, a 
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unique and compact structure is provided for storing the 
binary tree look-up table. In its most general form^ 
each of the "numbered** nodes, is represented with €md 
associated with, a subcunray of memory corresponding to 
5 its number in the sequence. In a particular embodiment 
of the invention, each subarray associated with a non- 
final node need only contain a threshold value, so that 
if the value of the key is greater than or ecpial to the 
threshold value, then the right child node is selected; 

10 otherwise, the left child node is selected. In this 

manner, a unique and simple memory structure is achieved 
to store the binaz^ tree nodes. 

In a preferred embodiment of the invention, in 
order to achieve efficient operation, the tree is 

15 balanced wherein each final node of the tree is given a 
"weight" of "O" and each non-final node of the tree is. 
given a weight equal to the sum of the weights of its 
right and left hand children, plus 1. Under these 
circumstances, if the weights of the children of any node 

20 differ by more than 1, the tree can be restructured so 
that the children of any node will no longer have a 
difference in the weight greater than 1. Such a 
rebalancing is illustrated in Figures 7A and 7B. Such 
balancing of the binary tree provides a particularly 

25 efficient t2a>le search function for any peurticular value 
of the key being examined. This efficiency results by a 
miniioization of a number of overall average number of 
steps needed to search the value of the key, assuming the 
values have a uniform prob2a>ility density distribution. 

30 In accordance with a preferred embodiment of the 

invention, when the header portion is composed of a 
plurality of different keys, all of which can affect the 
filtering, if any, to be performed upon the data packet, 
the header keys can be separately selected, thus 

35 segmenting the header, and each of the keys can be 
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processed through a separate binary tree stiructure to 
determine the filter mask appropriate to that key to be 
applied to the data packet* The resulting filter masks 
are AND'ed together to provide an overall filtering 
f 5 capability for processing that data packet. In addition, 

in accordance with the preferred embodiment of the 
invention, the resulting filter value is also AND'ed with 
a predetermined limited number of filter options, 
designated by a 32 bit preset filter word, which limits 
10 the number of filter operations which the user has 
designated as applying to that binary tree decoding 
process. 

In addition, since the keys themselves, in this 
illustrated embodiment of the invention, are limited to a 

15 32 bit value, the invention provides for segmenting, or 
subsegmenting any key or segmented portion of the header 
so that the various portions of the header are handled 
sepcirately in 32 bit "chunks". For any portion of a 
header less than 32 bits in length, in accordance with a 

20 particular preferred embodiment of the invention, the 
remaining portion of the key is left shifted to the most 
significant portion of the 32 bit word representing the 
key subsegment. The iresults of eacdi of the segmentation 
analyses in accordance with the invention btb thereby 

25 AND^ed together to provide the resulting filter solution 
for analyzing and enabling processing of the packet. 

Further, in accordance with a preferred embodiment 
of the invention, there is a provided a~ method for adding 
or deleting nodes from the tree structure of Figure 3, 

30 and thereby reconfigure the memory configuration of 
Figure 4. In accordance with this eispect of the 
apparatus, referrix^ to Figure 5, there are deleted nodes 
numbered 4, 9, 18 and 19. In accordance with the process 
of node deletion, the nondeleted c^ld nodes of each 

35 deleted parent replace the parent in this structure and 
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each of the child nodes of the now new "parent" are 
reninnbered in accordance with the invention. Thus^ in 
Figure 5, node 4 and its left hand children are deleted. 
In Figure 5, the nomenclatiire used within the node 
5 defining circle is "node number: threshold value" • 

The addition of a node is illustrated in Figure 6^ 
in which a new node has been inserted, at node 4, due to 
the change in threshold value at node 4. In this 
example, therefore, previously "final" nodes 8 and 9 

10 provide new threshold decision values. 

The insertion of nodes typically results in the 
splitting of ranges (that is the addition of a new rcuige 
boundary) , whereas the deletion of nodes typically 
represents the combining of two or more existing reinges 

15 and hence then elimination of one (or more) range 

boundaries (that is, the merger of smaller ranges) . The 
particular examples of Figures 5 and 6 also illustrate 
the use of a special threshold values, "O" in the 
examples, to denote a final node . 

20 Referring to Figures 7A and 7B, there is 

illustrated a typical balancing reainrangement, in ^ich, 
in Figure 7A, the tree is "too heavy" on the left branch 
of node 1 and, accordingly, is "rebalanced" in Figure 7B 
by moving some of the "weight" from the left hand side of 

25 the tree to the right hand side of the tree. Note that 
the two trees of Figures 7A and 7B are equivalent to each 
other, but that the weight associated with the child 
nodes is now "balemced". 

Each final node of the tree also provides user 

30 data whicdi can be employed as required for effecting tiser 
instructed operations. Typically, this will depend, at 
least in part, upon the filtering to be performed by the 
system . 
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Referring to Figure 8, there is illustrated an 
overall flow chart illustrating total operation of the 
system of Figure 9, in accordance with the illustrated 
embodiment of the invention. 
5 Referring to Figures 8 and 9, the implementation 

of the invention is preferably performed in accordance 
with a hardware/ software embodiment. As will be apparent 
to those slcilled in the art, the various elements of the 
invention can be embodied solely in hardware, solely in 

10 software or firmware, or in a combination of the two, as 
is desired for the pcurticular application and the related 
throughput and costs associated therewith. 

In accordzmce with the illustrated embodiment, a 
central processing tmit 100 controls operation of the 

15 packet forwarding apparatus 102 and initially receives 
user input data, typically from a keyboard input device 
104 (although other input devices can be employed) to 
define the binary decision tree as indicated at 106 of 
the operational flow chart (Figure 8). Once the binary 

20 decision tree (such as that of Figure 3) has been 

defined, the CPU begixis operation and creates and stores 
a look-up table (corresponding to Figure 4) in memory, 
\^ich will be used to process incoming packets. This is 
indicated at 108. The decision tree table is stored in a 

25 memory 110, which can be, and preferably is, RAM. 

The system is then ready to receive, analyze and 
process, and forward incoming data packets. The system 
waits, at 112, for a packet to be received. The received 
packet is available in an input buffer 114, operating 

30 semi-autonomously under the control of the central 

processing unit 100. XTnder the control of the CPU, in 
this illustrated embodiment of the invention, the various 
keys available in the header, the locations of which are 
known bef orehcind by the CPU, are extracted and provided 
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to a key storage memory 116. Packet storage and recovery 
of the header keys is indicated at 118 in Figure 8. 

The CPU examines the keys, determines typically ^ 
priori . whether the keys need to be segmented for proper 
5 processing, and, if they do, segmentation is effected at 
120. The CPU thereafter recalls an initial filter mask 
for this packet, ^ich defines and limits the number of 
operations which can be performed on the packet 
(indicated at 122) and thereafter passes the segments, 

10 serially, through their respective binary trees, and 
obtains from each binary tree table both a filter mask 
word and user data. The various filter mask words (32 
bit words as noted in this illustrated embodiment of the 
invention) , are AND'ed together with the initial filter 

15 mask, at 124, to achieve an overall processing for this 
data packet. The CPU thereafter processes the data 
packet in the input buffer in accordance with the filter 
metsk data and creates, in an output buffer 126, the 
output data packet, which will then be sent over the 

20 selected data communications path to a next node on the 
network. This is indicated at 128. When the processing 
is complete, as indicated at 130, a next packet can be 
received and processed. 

In this manner, a highly effective throughput and 

25 processing of iiq;>ut data packets can be achieved in 
accordance with the invention, by using the simple 
concept of binary tree searching with the particular 
memory saving features and data packet processing 
concepts embodied in the method and appearatus of the 

30 invention. 

In other embodiments of the invention, a different 
\rord length cam be used without adversely affecting 
operation in accordance with the invention. Further, the 
word length jieed not correspond exactly to the operating 
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width of either the filter mask, user data, keys or other 
aspects of the invention » 

Additions, subtractions, and other modifications 
of the described embodiments of the invention will be 
5 appsurent to those of ordinary skill in the field and are 
within the scope of the following claims. 

What is claimed is: 
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1. A method for processing a binary data packet 
having an information containing portion comprising the 
steps of creating and storing at least one binary tree 
decision table having a plurality of non-final nodes, and 

5 a plurality of final nodes, the table representing a 
binary decision tree structure, processing said 
information containing portion of said data packet to be 
processed using the at least one binary tree table for 
determining the processing to be used for said packet, 
10 and processing said packet in accordance with the 
processing results using said binary tree tcUt>le. 

2. The packet processing method of claim 1 
wherein said table creating and storing step comprises 
the steps of dividing a table storage into a numbered 

15 sequence of subarrays, ordering the binciry tree staructure 
in a dependency order of numbered nodes, and storing a 
left and a right node child of a node "n", stored at 
subarray *n", at subarrays "2n" and ••2n+l", 



3. The packet processing method of claim 2 
20 further comprising the step of balancing the binary tree 
structure prior to said ordering step. 



4. The packet processing method of claim 2 
further comprising the steps of assigning a weight to 
each node equal to the sum of the weights of each of its 

25 child nodes plus one, and balancing the binary tree 

structure whenever the weights associated with two child 
nodes of a common node differ by more than !• 

5. The packet processing method of claim 3 
further comprising the steps of adding nodes to an 

30 existing binary tree structure by modifying the binetry 
tree decision table, and deleting nodes from an existing 
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binaiY tree structxire by modifying the binary tree 
decision table. 

6. The packet processing method of claim 1 
wherein said first processing step comprises the steps of 

5 deciding, for each non-final node, whether said a 
selected siibset of said portion is greater than a 
predetermined node associated threshold value, and 
proceeding to one of a lower order right child node and a 
lower order left child node depending upon the relative 
10 values of said subset and said threshold. 

7. The packet processing method of claim 2 
wherein each said subarray is associated with a tree 
node, each non-final subarray stores a threshold value, 
and each final subarray of said tree nodes, associated 

15 with a final node, is designated by passing through a 
sequence of non-final nodes. 

8. The packet processing method of claim 7 
%^erein each final node has a tinique predetermined 
threshold value. 

20 9. The packet processing method of claim 8 

herein said unique value is zero. 

10. The packet processing method of claim 2 
herein each tree stimcture has at least one final 
subarray and each said final subarray has data containing 

25 an information data portion and a filter mask containing 
portion. 

11. The packet processing method of claim 10 
further comprising the steps of segmenting said input 
information containing portion into a plurality of 
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Information subset segments, processing said segments 
serially to determine a filter mask for each segment, and 
AND^ing the results of each filter mask with an initial 
filter mask. 

5 12. The packet processing method of claim 11 

%Aierein said segmenting step further comprises the step 
of dividing each segment having a bit length greater than 
an operating word length into a plurality of subsegments, 
and processing said subsegments through said binciry tree 
10 structture. 

13. An apparatus for processing a bineury data 
packet having an information containing portion 
comprising means for creating and storing at least one 
binary tree decision table having a plurality of non- 
15 final nodes, and a plurality of final nodes, the teible 

representing a binary decision tree structure, me£uis for 
processing said information containing portion of said 
data packet to be processed using the at least one binary 
tree table for determining the processing to be used for 
20 said packet, and means for processing said packet in 

accordance with the processing results using said binary 
tree table. 

14. The packet processing apparatus of claim 13 
therein said table creating cind storing means comprises 

25 means for dividing a table storage into a numbered 

sequence of subarrays, means for ordering the binary tree 
structtire in a dependency order of numbered nodes, cind 
means for storing a left and a right node child of a node 
"n", stored at subarray "n", at subarrays "•2n" and 

30 •2n+l«. 
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15. The packet processing appcuratus of claim 14 
further comprising means for balancing the binary tree 
structure prior to said ordering. 



• 16. The packet processing appeiratus of claim 14 

5 further comprising means for assigning a weight to each 
node equal to the sum of the weights of each of its child 
nodes plus one, and me£uis for balancing the binary tree 
structure %rtienever the weights associated with two child 
nodes of a parent node differ by more than 1. 



10 17. The packet processing apparatus of claim 15 

further comprising means for adding nodes to an existing 
binary tree structure by modifying the binary tree 
decision table, and means for deleting nodes from an 
existing binary tree structure by modifying the binsury 

15 tree decision tcible* 

18. The padcet processing apparatus of claim 13 
vberein said first processing means comprises means for 
deciding, for each non-final node, whether said a 
selected subset of said portion is greater than a 
20 predetersiined node associated threshold value, cind meems 
for proceeding to one of a lower order right child node 
and a lower order left child node depending upon the 
relative values of said subset and said threshold. 



19. The packet processing method of claim 14 
25 wherein each said subarray is associated with a tree 
node, each non-final subarray stores a threshold value, 
and each final subarray of said tree nodes associated 
with a final node, is designated by passing through a 
sequence of non-final nodes* 
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20. The packet processing appetratus of claim 19 
wherein each said final node stores a unique, 
predetermined threshold value • 



21. The packet processing apparatus of claim 20 
5 wherein said unique value is zero. 

22. The packet processing apparatus of claim 14 
wherein each tree structure has at least one final 
subsum^y and each said final subcirray has data containing 
an information data portion and a filter mask containing 

10 portion. 

23. The packet processing apparatus of claim 22 
further comprising means for segmenting said input 
information containing portion into a plurality of 
information subset segments, means for processing said 

15 segments serially to detennine a filter mask for each 

segment, and means for AND'^ing the results of each filter 
mask with an initial filter mask. 

24. The packet processing apparatus of claim 23 
wherein said segmenting means further comprises means for 

20 dividing each segment having a bit length greater than an 
operating word length into a plurality of subsegments, 
and mecms for processing said subsegments through said 
binary tree staructure. 
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